Archon Chrome extension security report

Archon is a Salesforce org health analyzer that runs in your browser. It scans your active org's metadata and configuration patterns, identifies technical debt, and surfaces architecture findings with severity and effort scores. WHAT ARCHON DOES Org Metadata Scan Scans your active Salesforce session and analyzes metadata across objects, fields, automations, flows, Apex classes, triggers, and validation rules. Technical Debt Detection Identifies common debt patterns including: - Redundant or conflicting automation (flows vs. triggers vs. workflow rules) - Unused custom fields and objects - Deprecated API usage - Large or untested Apex classes - Architecture anti-patterns Prioritized Findings Dashboard Findings are scored by severity and estimated remediation effort. Filter and sort by category, object, or risk level. Exportable Reports Export scan results for team reviews, sprint planning, or documentation. HOW IT WORKS 1. Open your Salesforce org in the active tab 2. Click the Archon icon in the Chrome toolbar 3. Start a Full Org Scan 4. Review findings in the dashboard 5. Export a report if needed All processing runs locally in your browser. Archon calls Salesforce APIs directly using your existing session. No scan data is sent to external servers. Results are stored locally in your browser. WHO THIS IS FOR - Salesforce admins auditing org configuration - Salesforce architects assessing platform health - Technical leads reviewing risk before releases - Consultants assessing a client org at the start of an engagement PRIVACY AND DATA - Runs entirely in your browser — no external servers involved - No user data is sold or shared with third parties - No telemetry or analytics - No remote code execution - All extension code is bundled in the package — nothing is loaded at runtime PERMISSIONS solely to authenticate API calls to your org. No cookie data is stored or transmitted externally. tabs: Identifies the active Salesforce tab so scans target the correct org. storage: Saves scan results and user preferences locally in the browser. Archon only activates on Salesforce domains (*.salesforce.com, *.force.com, *.my.salesforce.com). It does not access any other websites or data.